CVE-2020-0796 PoC — 微软 Microsoft SMBv3 缓冲区错误漏洞

Source

Associated Vulnerability

Title:微软 Microsoft SMBv3 缓冲区错误漏洞 (CVE-2020-0796)
Description:A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.

Description

CVE-2020-0796_CoronaBlue_SMBGhost

Readme

# SMBGhost aka CoronaBlue Artefacts

## PCAPs

* win7_crash_false.pcap [Win7, no crash]
* win10_crash_true.pcap [Win10, triggers BSOD]
* win7_not_vulnerable.pcap [Win7 scanning, results as non-exploitable]
* win10_vulnerable.pcap [Win10 scanning, results as exploitable]

File Snapshot


 [4.0K]  /data/pocs/18b0e2549285a584747b066a3c8f0a34b06b7e2d
├── [688K]  crash_pdu.png
├── [529K]  nonvulnerable_win7.png
├── [ 272]  README.md
├── [998K]  vulnerable_win10.png
├── [4.4K]  win10_crash_true.pcap
├── [1.5K]  win10_vulnerable.pcap
├── [2.6K]  win7_crash_false.pcap
└── [1.1K]  win7_not_vulnerable.pcap

0 directories, 8 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!